Skip to content

CVE-2026-72898

CVE

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
September 6, 2026
Last Seen
September 28, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A significant data breach at Trezor's logistics partner, ShipMonk, has exposed personal information of approximately 80,689 customers, including names, email addresses, phone numbers, and shipping addresses. The breach was enabled by a critical SQL injection vulnerability (CVE-2026-72898) in the Met...

Submersion AI launched its new cybersecurity model, Basin, which achieved an 80.8% score on the CyberGym benchmark, ranking 8th globally. Basin has successfully identified high-severity zero-day vulnerabilities in widely used software, including CVE-2026-86733 (Snipe-IT) and CVE-2026-82450 (BookStac...

Public Exploits

Checking GitHub for proof-of-concept code…